Identity and file permissions
A new sandbox on the current default image receives its current lease's identity-token environment before its first accepted command. File writes apply the requested mode, including executable scripts; the default remains 0644.